Patch Changes
-
87c1f3c: fix: reject
__proto__keys in malformedObjectwrapper payloadsThis validates the
"Object"parse path and throws when the wrapped value has an own__proto__key. -
40f1db1: fix: ensure sparse array indices are integers
-
87c1f3c: fix: disallow
__proto__keys in null-prototype object parsingThis disallows
__proto__keys in the"null"parse path so null-prototype object hydration cannot carry that key through parse/unflatten.